Add back code signing for Windows

bcc-code · May 1, 2024 · 246a222 · 246a222
1 parent 021c2b6
commit 246a222
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 1 deletion.
diff --git a/.github/workflows/electron.yml b/.github/workflows/electron.yml
@@ -54,6 +54,25 @@ jobs:
                   AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
                   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
+            - name: Code signing for Windows
+              run: |
+                  if [ "$RUNNER_OS" == "Windows" ]; then
+                      set DOTNET_SKIP_FIRST_TIME_EXPERIENCE=true
+                      dotnet tool install --global AzureSignTool --version 5.0.0
+                      AzureSignTool.exe sign -du "https://explorers.biblekids.io" ^
+                        -kvu "https://bccm-code-sign2.vault.azure.net" ^
+                        --azure-key-vault-client-id $WINDOWS_CLIENT_ID ^
+                        --azure-key-vault-client-secret $WINDOWS_CLIENT_PASSWORD ^
+                        -kvc "BCC MEDIA STI" ^
+                        -tr http://timestamp.digicert.com ^
+                        -v ^
+                        $(System.DefaultWorkingDirectory)\dist-app\*.exe
+                  fi
+              shell: bash
+              env:
+                  WINDOWS_CLIENT_ID: ${{secrets.BCCM_WINDOWS_CLIENT_ID}}
+                  WINDOWS_CLIENT_PASSWORD: ${{secrets.BCCM_WINDOWS_CLIENT_PASSWORD}}
+
             - name: Building the Electron app for Mac
               run: |
                   if [ "$RUNNER_OS" == "macOS" ]; then

diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "bible-explorers",
-  "version": "1.6.11",
+  "version": "1.6.12",
   "description": "App for Bible Explorers",
   "main": ".vite/build/main.js",
   "repository": {